Quantcast
Channel: Exchange Server 2013 - Administration, Monitoring, and Performance forum
Viewing all 9032 articles
Browse latest View live

Uninstalled .Net Framework 4.5 and rebooted the server , got crashed and not getting desktop (Blank screen with cmd prompt )

$
0
0

  Due to 1 issue uninstalled .Net Framework 4.5 and rebooted the Exchange server 2013 after that facing issue of getting blank screen with cmd prompt only. Even in safe mode getting the same error. Tried system repair and sfc /scannow [No error in Sfc /scannow].   Please help me how to resolve this issue. 


last email date of distribution list

$
0
0

I am trying to find the last email received date/sender details of 100 DLs. Can you suggest the best way to find using PowerShell?

I am using the below script. Please let me know if this will provide the correct details or not.

Import-Csv "DLMsgTrack.csv" | %{Get-MessageTrackingLog -EventId receive -Recipients $_.name -ResultSize 2 | select-object recipients,timestamp |sort timestamp -descending}

Federation Trust doesnt work

$
0
0

Hello,

I  have on prem exch 2013(domain: contoso.com) and i want to sync with office365 organization (domain: office365.com).

So If I choose add additional domains (+) select domain contoso.com i copy the dns record, publish on my public DNS, Im getting this error:

Unable to reserve the URI "contoso.com" for the domain "contoso.com" on application identifier "000000004003F671". Detailed information: "An error occurred accessing Windows Live. Detailed information: "Unable to connect to the remote server".".

What I should do?

Thanks

Retention policy not applying

$
0
0

We have 3 exchange 2013 multi role servers running in a hybrid environment, on exchange EX03 that was recently deployed we have 4 database mounted. all databases in environment has retention policy of 14 days for deleted items. databases on server ex03 has grown rapidly and after further investigation we found that all users mailboxes in these databases have deleted items older than 14 days. if we run Start-ManagedFolderAssistant -identity xyz_01 cmdlets we get below error in events with other information events. On other 2 servers retention policy is applying as expected to mailbox users in the database mounted on those 2 servers. 

The description for Event ID 5000 from source MSExchange Management Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

Cmdlet Name: Start-ManagedFolderAssistant
Object Modified: company.com/*...../*.......*/Users/XYZ
Parameter: Identity = xyz_01
Caller: company.com/Service Admins/Users/Server Admins/Exchange Organization Administrator
ExternalAccess: False
Succeeded: True
Run Date: 2020-04-07T09:33:39
OriginatingServer: EXCH03 (15.00.1473.003)

First Organization
Microsoft.Exchange.Data.ApplicationLogic.AuditLogException: An error occurred while trying to access the audit log. For more details, see the inner exception. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
   at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.ConnectStream.WriteHeaders(Boolean async)
   --- End of inner exception stack trace ---
   at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
   at Microsoft.Exchange.SoapWebClient.CustomSoapHttpClientProtocol.GetWebResponse(WebRequest request)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.Exchange.SoapWebClient.HttpAuthenticator.NetworkServiceHttpAuthenticator.AuthenticateAndExecute[T](CustomSoapHttpClientProtocol client, AuthenticateAndExecuteHandler`1 handler)
   at Microsoft.Exchange.SoapWebClient.EWS.ExchangeServiceBinding.GetFolder(GetFolderType GetFolder1)
   at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
   at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CheckAndCreateWellKnownFolder(DistinguishedFolderIdNameType parentFolder, DistinguishedFolderIdNameType targetFolder, FolderIdType& targetFolderId)
   at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger.InitializeAdminAuditLogsFolder()
   at Microsoft.Exchange.ProvisioningAgent.AuditLoggerFactory.Create(ExchangePrincipal principal, ArbitrationMailboxStatus status)
   at Microsoft.Exchange.ProvisioningAgent.ConfigWrapper.get_MailboxLogger()
   at Microsoft.Exchange.ProvisioningAgent.AdminLogProvisioningHandler.WriteAuditRecord(Stopwatch stopwatch)

The request is not supported

 

Exchange 2010 remove from AD issues

$
0
0

I am decommissioning a SBS 2011 server which has Exchange 2010 on it, the server was migrated to O365 over a year ago but the exchange server was never decommission.

I am using the links below to decommission the server and I have ran into issue with removing the main database.

All mailboxes, mailbox plans, archive, and Arbitration are gone, using EAC powershell I have confirmed that (nothing returns)

But the main database remains active and I cannot remove the database because of the error below, Any other ways to remove the database?

https://www.mustbegeek.com/delete-default-mailbox-database-in-exchange-2010/#.XozgwXtlCUl

https://exchangemaster.wordpress.com/2010/03/24/cannot-remove-a-mailbox-database-in-exchange-2010/

http://woshub.com/how-to-delete-default-database-in-exchange-20102013/

Event ID 3028 MSExchangeApplicationLogic

$
0
0

Hi,

I have a problem where Event ID 3028 Source MSExchangeApplicationLogic is beeing logged every 6 hours with 4 same type of events. Here is the log:

Scenario: ProcessKillBit. Failed to read killbit list file because of exception System.IO.IOException: The process cannot access the file 'C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\prem\15.0.995.29\ext\killbit\killbit.xml' because it is being used by another process.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
   at System.IO.File.Open(String path, FileMode mode, FileAccess access, FileShare share)
   at Microsoft.Exchange.Data.ApplicationLogic.Extension.KillBitHelper.TryReadKillBitFile(Int32& refreshRate, DateTime& lastModifiedTime)

The environment is single virtual MS Exchange 2013 server running on Windows 2012 R2. DC is running on a separate server.

I can't seem to find any articles or blogs relating to this issue.

Thanks for any help.

Delete a Message from Database

$
0
0

Hi,

I urgently delete a message from all mailboxes from Exchange 2013 sent by a user. Is it possible to delete it based on the sender and the time/date it was sent because the subject is not in English and EMS does not recognize the language.

Thanks.

Uninstalled .Net Framework 4.5 and rebooted the server , got crashed and not getting desktop (Blank screen with cmd prompt )

$
0
0

  Due to 1 issue uninstalled .Net Framework 4.5 and rebooted the Exchange server 2013 after that facing issue of getting blank screen with cmd prompt only. Even in safe mode getting the same error. Tried system repair and sfc /scannow [No error in Sfc /scannow].   Please help me how to resolve this issue. 


OUs based on a creation date

$
0
0
what would the query be in AD powershell to find  all OUs based on a creation date

MSExchange Mid-Tier Storage Event ID:1006

$
0
0

I am constantly getting this error at least once a day. When I log into the server I cannot ping the DC or open the ECP. The only solution to get my Exchange 2013 Server back up and running is to shutdown and restart. 

I plan on updating the firmware and drivers on my HP Proliant DL360 (Microsoft Tech suggestion).

Any suggestions will be greatly appreciated.

EVENT VIEWER MESSAGES

Log Name:      Application
Source:        MSExchange Mid-Tier Storage
Date:          4/27/2015 3:31:27 PM
Event ID:      10006
Task Category: (10)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      lpimail2.lusterproducts.com
Description:
Active Manager Client experienced an AD timeout trying to lookup object 'SERVER' in 00:01:00.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange Mid-Tier Storage" />
    <EventID Qualifiers="49152">10006</EventID>
    <Level>2</Level>
    <Task>10</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-27T20:31:27.000000000Z" />
    <EventRecordID>974511</EventRecordID>
    <Channel>Application</Channel>
    <Computer>mail server</Computer>
    <Security />
  </System>
  <EventData>
    <Data>mail server</Data>
    <Data>00:01:00</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        MSExchange ADAccess
Date:          4/27/2015 3:39:57 PM
Event ID:      4027
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     mail server
Description:
Process w3wp.exe (UNKNOWN) (PID=20048). WCF request (Get Servers for xxxxxxxxx) to the Microsoft Exchange Active Directory Topology service on server (TopologyClientTcpEndpoint (localhost)) failed. Make sure that the service is running. In addition, make sure that the network ports that are used by Microsoft Exchange Active Directory Topology service are not blocked by a firewall. The WCF call was retried 3 time(s). Error Details 
 System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:02:00'. ---> System.IO.IOException: The read operation failed, see inner exception. ---> System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:02:00'. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
   at System.ServiceModel.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)
   --- End of inner exception stack trace ---
   at System.ServiceModel.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)
   at System.ServiceModel.Channels.SocketConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
   at System.Net.Security.NegotiateStream.StartFrameHeader(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.StartReading(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   --- End of inner exception stack trace ---
   at System.Net.Security.NegotiateStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at System.ServiceModel.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   --- End of inner exception stack trace ---

Server stack trace: 
   at System.ServiceModel.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   at System.ServiceModel.Channels.SessionConnectionReader.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.SynchronizedMessageSource.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel.TryReceive(TimeSpan timeout, Message& message)
   at System.ServiceModel.Dispatcher.DuplexChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]: 
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.Exchange.Data.Directory.TopologyDiscovery.ITopologyClient.GetServersForRole(String partitionFqdn, List`1 currentlyUsedServers, ADServerRole role, Int32 serversRequested, Boolean forestWideAffinityRequested)
   at Microsoft.Exchange.Data.Directory.ServiceTopologyProvider.<>c__DisplayClass10.<InternalServiceProviderGetServersForRole>b__f(IPooledServiceProxy`1 proxy)
   at Microsoft.Exchange.Net.ServiceProxyPool`1.TryCallServiceWithRetry(Action`1 action, String debugMessage, WCFConnectionStateTuple proxyToUse, Int32 numberOfRetries, Boolean doNotReturnProxyOnSuccess, Exception& exception)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange ADAccess" />
    <EventID Qualifiers="49156">4027</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-27T20:39:57.000000000Z" />
    <EventRecordID>974647</EventRecordID>
    <Channel>Application</Channel>
    <Computer>mail server</Computer>
    <Security />
  </System>
  <EventData>
    <Data>w3wp.exe (UNKNOWN)</Data>
    <Data>20048</Data>
    <Data>Get Servers for xxxxxxx</Data>
    <Data>TopologyClientTcpEndpoint (localhost)</Data>
    <Data>3</Data>
    <Data>System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:02:00'. ---&gt; System.IO.IOException: The read operation failed, see inner exception. ---&gt; System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:02:00'. ---&gt; System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
   at System.ServiceModel.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)
   --- End of inner exception stack trace ---
   at System.ServiceModel.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)
   at System.ServiceModel.Channels.SocketConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
   at System.Net.Security.NegotiateStream.StartFrameHeader(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.StartReading(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   --- End of inner exception stack trace ---
   at System.Net.Security.NegotiateStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.NegotiateStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at System.ServiceModel.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   --- End of inner exception stack trace ---

Server stack trace: 
   at System.ServiceModel.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)
   at System.ServiceModel.Channels.SessionConnectionReader.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.SynchronizedMessageSource.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel.Receive(TimeSpan timeout)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel.TryReceive(TimeSpan timeout, Message&amp; message)
   at System.ServiceModel.Dispatcher.DuplexChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]: 
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&amp; msgData, Int32 type)
   at Microsoft.Exchange.Data.Directory.TopologyDiscovery.ITopologyClient.GetServersForRole(String partitionFqdn, List`1 currentlyUsedServers, ADServerRole role, Int32 serversRequested, Boolean forestWideAffinityRequested)
   at Microsoft.Exchange.Data.Directory.ServiceTopologyProvider.&lt;&gt;c__DisplayClass10.&lt;InternalServiceProviderGetServersForRole&gt;b__f(IPooledServiceProxy`1 proxy)
   at Microsoft.Exchange.Net.ServiceProxyPool`1.TryCallServiceWithRetry(Action`1 action, String debugMessage, WCFConnectionStateTuple proxyToUse, Int32 numberOfRetries, Boolean doNotReturnProxyOnSuccess, Exception&amp; exception)</Data>
  </EventData>
</Event>

A fatal error occurred while creating an SSL client credential. The internal error state is 10013.

$
0
0

Hi All

I am seeing the below event appearing in the system log on all our Exchange 2013 servers regularly. I am not seeing any connectivity issues between any clients and the servers and no other issues have been reported at this stage.

Log Name:      System
Source:        Schannel
Date:          10/04/2015 9:21:17 AM
Event ID:      36871
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:     
Description:
A fatal error occurred while creating an SSL client credential. The internal error state is 10013.

I am not sure if its related to the public certificate we are using or if its related to the one provided from the local CA.I have searched and found other links that suggest it could be related to SSL versions being disabled etc.

All servers are running Windows 2012 R2 Datacenter. The Exchange CAS servers do also sit behind a pair of F5 BIG IP Load Balancers 

Any suggestions on where to look?

Thanks


Exchange Server 2012: Health Manager Worker causes BSOD when iSCSI target is unavailable

$
0
0

Windows Server 2012 (all updates are installed), Exchange Server 2012 CU1. Mail database server role. Volume with mail database is attached to the mail server using iSCSI protocol. This database volume is stored on other Windows 2012 file server with iSCSI Target component activated.

Last night that file server crashed because of hardware issues. Its reboot took more that half an hour. During that time the mail serer crashed twice (iSCSI target inaccessible - BSOD - half an hour later iSCSI target is still inaccessible - BSOD - iSCSI Target is accessible - mail server works as usual).

After investigating crash dump file I've found that the culprit is MSExchangeHMWorker process (Exchange Health Manager Worker). Additional info is shown below.

The main question: is it possible to turn that process off without seriously crippling Exchange services? I suspect this is not the last time iSCSI servers crash, and I don't want our mail database servers to follow in their wake. I can live without monitoring, but I cannot allow the servers to die unexpectedly.

------------------

Bugcheck Analysis

CRITICAL_PROCESS_DIED (ef)
        A critical system process died
Arguments:
Arg1: fffffa800e334700, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for System.ni.dll

PROCESS_OBJECT: fffffa800e334700

IMAGE_NAME:  wininit.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000

PROCESS_NAME:  MSExchangeHMWo

BUGCHECK_STR:  0xEF_MSExchangeHMWo

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

CURRENT_IRQL:  0

MANAGED_STACK: !dumpstack -EE
!dumpstack -EE
OS Thread Id: 0x0 (3)
TEB information is not available so a stack size of 0xFFFF is assumed
Current frame:
Child-SP         RetAddr          Caller, Callee

LAST_CONTROL_TRANSFER:  from fffff8003a5fa6d9 to fffff8003a0d2240

STACK_TEXT: 
fffff880`051419a8 fffff800`3a5fa6d9 : 00000000`000000ef fffffa80`0e334700 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`051419b0 fffff800`3a591df2 : fffffa80`0e334700 00000000`144d2c41 00000000`00000000 fffff800`3a24e304 : nt!PspCatchCriticalBreak+0xad
fffff880`051419f0 fffff800`3a508a81 : fffffa80`0e334700 00000000`144d2c41 fffffa80`0e334700 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x4adfe
fffff880`05141a50 fffff800`3a50e846 : ffffffff`ffffffff fffffa80`0fb74980 fffffa80`0e334700 00000000`00000001 : nt!PspTerminateProcess+0x6d
fffff880`05141a90 fffff800`3a0d1253 : fffffa80`0e334700 fffffa80`108ceb00 fffff880`05141b80 00000000`ffffffff : nt!NtTerminateProcess+0x9e
fffff880`05141b00 000007ff`5b542eaa : 000007ff`58861731 00000000`229be048 00000000`051456a8 00000000`00000984 : nt!KiSystemServiceCopyEnd+0x13
00000000`229bdfa8 000007ff`58861731 : 00000000`229be048 00000000`051456a8 00000000`00000984 00000000`21776c40 : ntdll!NtTerminateProcess+0xa
00000000`229bdfb0 000007ff`50e55c3b : 000007ff`50e55c3b 00000000`ffffffff 00000000`21776c40 00000000`0517c588 : KERNELBASE!TerminateProcess+0x25
00000000`229bdfe0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : System_ni+0x795c3b


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  0xEF_MSExchangeHMWo_IMAGE_wininit.exe

BUCKET_ID:  0xEF_MSExchangeHMWo_IMAGE_wininit.exe

Followup: MachineOwner
---------

rax=fffff88005141903 rbx=fffffa800e334700 rcx=00000000000000ef
rdx=fffffa800e334700 rsi=0000000000000000 rdi=fffffa800e334700
rip=fffff8003a0d2240 rsp=fffff880051419a8 rbp=0000000000000001
 r8=0000000000000000  r9=0000000000000000 r10=00000000144d2c49
r11=fffff88005141af8 r12=00000000ffffffff r13=0000000000000000
r14=fffffa80108ceb00 r15=fffffa80108ceb00
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff800`3a0d2240 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`051419b0=ef00000000000000
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`051419a8 fffff800`3a5fa6d9 : 00000000`000000ef fffffa80`0e334700 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`051419b0 fffff800`3a591df2 : fffffa80`0e334700 00000000`144d2c41 00000000`00000000 fffff800`3a24e304 : nt!PspCatchCriticalBreak+0xad
fffff880`051419f0 fffff800`3a508a81 : fffffa80`0e334700 00000000`144d2c41 fffffa80`0e334700 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x4adfe
fffff880`05141a50 fffff800`3a50e846 : ffffffff`ffffffff fffffa80`0fb74980 fffffa80`0e334700 00000000`00000001 : nt!PspTerminateProcess+0x6d
fffff880`05141a90 fffff800`3a0d1253 : fffffa80`0e334700 fffffa80`108ceb00 fffff880`05141b80 00000000`ffffffff : nt!NtTerminateProcess+0x9e
fffff880`05141b00 000007ff`5b542eaa : 000007ff`58861731 00000000`229be048 00000000`051456a8 00000000`00000984 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`05141b00)
00000000`229bdfa8 000007ff`58861731 : 00000000`229be048 00000000`051456a8 00000000`00000984 00000000`21776c40 : ntdll!NtTerminateProcess+0xa
*** WARNING: Unable to verify checksum for System.ni.dll
00000000`229bdfb0 000007ff`50e55c3b : 000007ff`50e55c3b 00000000`ffffffff 00000000`21776c40 00000000`0517c588 : KERNELBASE!TerminateProcess+0x25
00000000`229bdfe0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : System_ni+0x795c3b
start             end                 module name
00000000`00590000 00000000`0059c000   MSExchangeHMWorker MSExchangeHMWorker.exe Mon Feb 18 08:37:06 2013 (512193D2)

<skip>

Mailbox migration to another DB is not working

$
0
0

Hi,

we are using Exchange 2013 SP1 and we are experiencing problem with migration of probably half of the mailboxes, to another Database.

Error message is:

"
Status: Failed 
a***.a*****@*.com Skipped item details 

Data migrated:  
Migration rate:  
Error: MigrationPermanentException: Mailbox ‎'*** ***‎' has a completed move request associated with it. Before you create a new move request for the mailbox, run the Remove-MoveRequest cmdlet to clear the completed move request. --> Mailbox ‎'*** ***‎' has a completed move request associated with it. Before you create a new move request for the mailbox, run the Remove-MoveRequest cmdlet to clear the completed move request. 
Report: a***.a***@*.com Download the report for this user

"

There is nothing into report and I can't find specific error in event viewer.

Any idea?

Best regards,


Aleksandar B. MCITP/MCSA

Message Tracking

$
0
0

HI Team,

How to track message with all details like connector ,event id. and which email pass which connector.

Please provide powershell command for message tracking.


Satish Chaturvedi Mob-9990806001

Exchange 2013 - High Availability of Databases in DAG

$
0
0

Hi Folks,

For a customer, who has On-Premises Exchange 2013 - I recently upgraded them to latest CU 23 in order to setup Hybrid Exchange. Their environment is Single AD Site with 2 Mailbox servers in a DAG with total of 20 databases and 2 CAS Servers. After the upgrade, problem is all databases are mounted to a single Mailbox Server (Server01) even when we switched databases to second server (Server02), databases moved to Server02 without any issue or error but after sometime they get back to Server01.

After digging further, i was able to find below error under event viewer - Microsoft > Exchange > HighAvailability > BlockReplication :

"BlockMode replication for database 'DB01' failed to initialize with the passive copy on 'SERVER02' : Sender failed to join: passiveName(SERVER02) genToSend(0x368ECD)"

I don't see any other error. due to this all workload is on single server which is causing slow response to email flow and client requests. Please suggest how can i balance these databases. or what could be the possible cause of this issue?

Thanks in advanced.


Thanks, Sheeraz


Exchange 2013 - Message Queues

$
0
0

Hello!

We have 5 exchange servers in total. 3 on production site (1 cas , 2 mbox) and 2 on disaster site (1 cas , 1 mbox). Mailbox servers are on Database Availability Group. Today i had a very strange incident. Users they were complaining that they are getting some delivery delay messages. I opened the exchange toolbox and then went to queue viewer. I found inside more than 3500 emails from addresses like merandomnumber@myhouse.com. Could you please let me know what is wrong with our exchange configuration and it allows for someone to send an email from our mail servers

Thank you

Regarding EOP

$
0
0

Recently we got mail from blacklisted ip address whereas we are  using EOP .Anybody please answer my below question

Does EOP check the server IP reputation ? Why EOP allowed a mail from a blacklisted mail server? Does EOP check this database

repair ariston خدمة صيانة غسالات اريستون الشرقية ( 01129347771 +01207619993 )

$
0
0

repair ariston خدمة صيانة غسالات اريستون الشرقية ( 01129347771 +01207619993 )

الارقام الساخنه للاتصال ب خدمة عملاء اجهزة اريستون المنزلية || ثلاجه,غساله,غسالات,ثلاجات ,غساله اطباق,غسالات ‏اطباق,ديب فريزر ,فريزر ,مجفف, دراير , لاندرى ,ايس ميكر ,ثلاجات نبيذ,ثلاجة نوفرست,ثلاجة,غسالة,غسالة اطباق,غسالة ‏ملابس

 || 01129347771  || 01207619993 || 01223179993   ||  ||  ||   || 01129347771  || 01207619993 || 01223179993   ||  || 01129347771  || 01207619993 || 01223179993 

صيانة اريستون المعادى |||| صيانة اريستون محافظة الاسكندرية |||| مركز خدمة اريستون التجمع الخامس |||| افضل اصلاح اريستون عين شمس |||| خدمة اصلاح ‏اريستون مصر الجديدة |||| تصليح اريستون مدينة نصر |||| توكيل اريستون الزمالك |||| اصلاح اريستون شبرا |||| اسرع صيانة ‏اريستون حدائق المعادى |||| صيانة اريستون محافظة الاسكندرية |||| اماكن تصليح اريستون حدائق الهرم |||| شركة صيانة اريستون الزيتون |||| شركة توكيل اريستون ‏روكسى |||| احدث صيانة اريستون العباسية |||| توكيل اريستون العمرانية |||| اول مركز توكيل اريستون الجيزة |||| اماكن تصليح ‏اريستون المريوطية |||| متميزون صيانة اريستون غمره |||| ارشادات توكيل اريستون كورنيش النيل |||| موقع صيانة اريستون ‏‏|||| دليل توكيل اريستون المقطم |||| خدمة اصلاح اريستون الهرم |||| المركز الرئيسى اريستون الازهر |||| مراكز متخصصة ‏اريستون جسر السويس |||| احسن استجابة اريستون غمره |||| مبتكرون صيانة اريستون القطامية |||| متطورين صيانة اريستون ‏الضاهر |||| فروع توكيل اريستون 6 اكتوبر |||| محترفون صيانة اريستون شبرا الساحل |||| اخيرا توكيل اريستون امبابه |||| احسن ‏تقنية اريستون القاهرة الجديدة |||| صيانة اريستون الدقى |||| الوكيل اريستون فيصل |||| اضمن اصلاح اريستون الشيخ زايد

اريستون المعادى, اريستون المنيل , اريستون وادى حوف , اريستون حلوان , اريستون 15 مايو , اريستون القطامية , ‏‏ اريستون المقطم , اريستون التجمع ,  اريستون التجمع الاول , اريستون التجمع الخامس ,  اريستون القاهرة الجديدة , ‏اريستون مدينة نصر ,  اريستون الرحاب , اريستون عمارات العبور , اريستون شيراتون مصر الجديدة , اريستون ‏اريستون مدينتى ,   اريستون الشروق , اريستون العبور, اريستونالنزهه ,  اريستون النزهه الجديده , اريستون مصر ‏الجديدة , اريستون الكوربه ,  اريستون العباسية ,  اريستون الزيتون ,  اريستون جسر السويس ,  اريستون عين شمس , ‏اريستون المطرية , اريستون القبه ,  اريستون حدائق القبه , اريستون الدمرداش , اريستون الضاهر,  اريستون  ‏رمسيس, اريستون وسط البلد , اريستون شبرا مصر , اريستون جاردن سيتى ,  اريستون بولاق ابو العلا , اريستون ‏الزمالك ,  اريستون الكيت كات ,  اريستون العجوزه , اريستون الدقى ,  اريستون التحرير , اريستون السيدة زينب , ‏اريستون القصر العينى ,  اريستون الدمرداش , اريستون المهندسين , اريستون بين السرايات, اريستون الجيزة , ‏اريستون ميدان الجيزة ,  اريستون 6 اكتور ,  اريستون السادس من اكتوبر ,  اريستون الشيخ زايد , اريستون  بفلى هيلز ‏‏,اريستون نبو جيزة ,‏اريستون الهرم ,اريستون فيصل , اريستون المريوطية ,اريستون حدائق الهرم ,اريستون ‏العمرانية,اريستون الطالبية , اريستون المرج ,اريستون القرية الذكية ,الكترو ستار هضبة الهرم , اريستون الاهرام ‏‏,اريستون ابو الهول,اريستون المنيب

  repair ariston                                    ثلاجات اريستون )‏  )      repairing ariston     

service ariston                                        ‏( غسالات اريستون )‏    center ariston     

malfunction ariston                                 ‏( ارقام صيانة اريستون )‏  maintenance ariston     

agent ariston                                        ‏(غساله اريستون )‏     agents ariston                                                                                            

authorization ariston                              ‏( غساله اطباق اريستون )‏  workshops ariston     

customer service ariston                    ‏( غسالات ملابس )‏     engineers ariston     

specialists ariston                                  ‏( ديب فريزر )‏  Technical support ariston     

support reform ariston                     ‏( لاندرى )‏    support repair ariston               

agent ariston                                ‏( ايس ميكر )‏

ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston      ariston     ariston     

الادارة فى انتظار اتصالاتكم : _ 01129347771  || 01207619993 || 01223179993  

 

 

Full Mailbox Access

$
0
0

I've noticed that there are users in my organization who have permission on their permission "Full Mailbox Access " And some don't.

Is it required? Why are there user differences?

Remove and Delete Mailbox default Database

$
0
0
Hi,


We would like to unmount and delete the default mailbox database that was created during Exchange installation. It looks like we only have a Discovery Search Mailbox in that database. Does the discovery mailbox need to be moved to a different database before Mailbox Database 1074357887 could be deleted? Is there anything else in the default mailbox database that could potentially cause problems when deleted? 

Get-MailboxDatabase "Mailbox Database 1074357887" | Get-mailbox



Name                      Alias                ServerName       ProhibitSendQuota
----                      -----                ----------       -----------------
DiscoverySearchMailbox... DiscoverySearchMa... ex1            50 GB (53,687,091,200 bytes)

Edit: Didn't find a way to move the mailbox, looks like it would have to be recreated 

https://docs.microsoft.com/en-us/exchange/security-and-compliance/in-place-ediscovery/delete-and-re-create-default-discovery-mailbox

Where can we specify the mailbox database for the Discovery Mailbox to be created in?

Thanks 



Viewing all 9032 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>